CYCLOTOMIC CONSTRUCTIONS OF SKEW HADAMARD 

DIFFERENCE SETS 
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Abstract. We revisit the old idea of constructing difference sets from 
cyclotomic classes. Two constructions of skew Hadamard difference sets 
are given in the additive groups of finite fields by using union of cy- 
clotomic classes of F 9 of order N = 2p7\ where pi is a prime and m 
a positive integer. Our main tools are index 2 Gauss sums, instead of 
cyclotomic numbers. 



1. Introduction 

We assume that the reader is familiar with the basic theory of difference 
sets as can be found in [18] and Chapter 6 of [5]. For a survey of recent 
progress in this area we refer the reader to |29j . 

A difference set D in a finite group G is called skew Hadamard if G is the 
disjoint union of D, D^ l \ and {1}, where = {d' 1 \ d G D}. The 

primary example (and for many years, the only known example in abelian 
groups) of skew Hadamard difference sets is the classical Paley difference set 
in (Wq, +) consisting of the nonzero squares of ¥ q , where ¥ q is the finite field 
of order q, and q is a prime power congruent to 3 modulo 4. Skew Hadamard 
difference sets are currently under intensive study, see [TO1 [111 GEJ ETJ [HI [24] ■ 
There were two major conjectures in this area: (1) If an abelian group G 
contains a skew Hadamard difference set, then G is necessarily elementary 
abelian. (2) Up to equivalence the Paley difference sets mentioned above 
are the only skew Hadamard difference sets in abelian groups. The first 
conjecture is still open in general. We refer the reader to [6] for the known 
results on this conjecture. The second conjecture failed spectacularly: Ding 
and Yuan [TO] constructed a family of skew Hadamard difference sets in 
(F^m , +), where m > 3 is odd, and showed that the 2nd and the 3rd examples 
in the family are inequivalent to the Paley difference sets. Very recently, 
Muzychuk [M] constructed exponentially many inequivalent skew Hadamard 
difference sets over an elementary abelian group of order q 3 . 

We give a short survey of the known constructions of skew Hadamard 
difference sets. Shortly after the appearance of the DingYuan construction 
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|10j . by using certain permutation polynomials arising from the Ree-Tits 
slice symplectic spreads, Ding, Wang and Xiang [IT] constructed a class 
of skew Hadamard difference sets in (F3m,+), where m is odd. Next the 
classical Paley construction was generalized from finite fields to commutative 
semifields in [28J. As a consequence, every finite commutative semifield of 
order congruent to 3 modulo 4 gives rise to a skew Hadamard difference 
set. The first author |13j then constructed a family of skew Hadamard 
difference sets in the nonabelian group of order p 3 and exponent p, where 
p is an odd prime. Prior to [13) . only two nonabelian skew Hadamard 
difference sets were known [T7]; both are in nonabelian groups of order 27. 
Motivated by |13j . Muzychuk [23] has now given a prolific construction of 
skew Hadamard difference sets in elementary abelian groups of order q 3 , 
where q is a prime power. We also mention that the construction in |13) was 
recently generalized in [7] and [8]. 

Let q = p* , where p is a prime and / a positive integer. Let 7 be a 
fixed primitive element of ¥ q and N\(q — 1) with N > 1. Let Co = (7 ), 
and Cj = 7* Co for 1 < i < N — 1. The d are called the cyclotomic 
classes of order N of ¥ q . In this paper, we give two constructions of skew 
Hadamard difference sets in the additive groups of finite fields by using 
unions of cyclotomic classes. 

The idea of constructing difference sets (and strongly regular Cayley 
graphs) from cyclotomic classes of course goes back to Paley [25]. In the 
mid-20th century, Baumert, Chowla, Hall, Lehmer, Storer, Whiteman, Ya- 
mamoto, etc. pursued this line of research vigorously. Storer's book [26] 
contains a summary of results in this direction up to 1967. See also Chapter 
5 of m for a summary. This method for constructing difference sets, how- 
ever, has had only very limited success. Let Cj be as above. It is known [5[ 
p. 123-124] that a single cyclotomic class can form a difference set in (¥ q , +) 
if N = 2, 4, or 8 and q satisfies certain conditions. (Note that in order to 
obtain difference sets this way, the conditions on q are quite restrictive when 
N = 4 or 8). It is conjectured that the converse is also true. Namely, if Co 
is a difference set in (F g ,+), then ./V is necessarily 2,4, or 8. This conjec- 
ture has been verified [12] up to N = 20. If one uses a union of cyclotomic 
classes, instead of just one single class, the only new family of difference 
sets found in this way is the Hall sextic difference sets in (F q , +) formed by 
taking a union of three cyclotomic classes of order 6, where q = 4x 2 + 27 is 
a prime power congruent to 1 modulo 6. One of the reasons that very few 
difference sets have been discovered by using unions of cyclotomic classes is 
that the investigations often relied on the so-called cyclotomic numbers and 
these numbers are in general very difficult to compute if N is large. 

In this paper, we construct skew Hadamard difference sets in (Fq,+) by 
using union of cyclotomic classes of order iV = 2p™ of ¥ q , where p\ is an odd 
prime, q is a power of a prime p, gcd(p,N) = 1, — 1 (p) C (Z/iVZ)*, and 
the order of p modulo N is half of (fi(N) (here eft is the Euler phi function). 
This last condition is the so-called index 2 condition in the theory of Gauss 
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sums. The significance of our constructions is twofold. First, other than the 
classical Paley difference sets, previously known abelian skew Hadamard 
difference sets were constructed either in (F g ,+), where q is a power of 3, 
or in groups of order p 3k , where p is an odd prime. The constructions in 
this paper can produce skew Hadamard difference sets in elementary abelian 
groups where no previous constructions were known except for the classical 
Paley difference sets. Secondly our constructions demonstrate that the old 
idea of constructing difference sets from cyclotomic classes is not a dead end, 
thus it should be further exploited. 

The recent success in constructing strongly regular Cayley graphs by using 
union of cyclotomic classes in |14| lends further credence to our opinion on 
cyclotomic methods for constructing difference sets. Since the constructions 
in this paper are motivated by those in p3] , we include here a brief discussion 
of the results in [14] . Let D be a subset of ¥ q such that — D = D and 
D. We define the Cayley graph C&y(¥ q , D) to be the graph with the 
elements of ¥ q as vertices; two vertices are adjacent if and only if their 
difference belongs to D. When D is a subgroup of the multiplicative group 
F* of ¥ q and Cay(F g , D) is strongly regular, then we speak of a cyclotomic 
strongly regular graph. In particular, if D is the subgroup of F* consisting 
of the squares, where q is a prime power congruent to 1 modulo 4, then 
C&y(Fg, D) is the well-known Paley graph. In [T4j, we were interested in 
examples due to De Lange [19] and Ikuta and Munemasa [15] . in which one 
single cyclotomic class does not give rise to a strongly regular Cayley graph 
while a union of several classes does. Generalizing these examples, we give 
two constructions of strongly regular Cayley graphs on finite fields ¥ q by 
using union of cyclotomic classes of ¥ q of order N, where N = p™ or p™p2, 
pi and pi are distinct odd primes. The main tools used in the proofs are 
index 2 Gauss sums. In particular, we |14j obtain twelve infinite families of 
strongly regular Cayley graphs with new parameters. 

2. Gauss sums 

Let p be a prime, / a positive integer, and q = pf . Let £ p = e 2m l p and 
let i/j be the additive character of ¥ q defined by 

1>:W q ^C*, i,(x)=^ x \ (2.1) 

where Tr is the absolute trace from ¥ q to ¥ p . Let x : F* — ?■ C* be a character 
of F* . We define the Gauss sum by 

a£F* 

Usually we simply write g{x) for 9 (x) if the finite field involved is clear 

W q 

from the context. Note that if xo is th e trivial multiplicative character of 
W q , then g(xo) = — 1- We are usually concerned with nontrivial Gauss sums 
g{x)-> i-e., those with x / Xo- Gauss sums can be viewed as the Fourier 
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coefficients in the Fourier expansion of ^|f* in terms of the multiplicative 
characters of ¥ q . That is, for every c E F* 



^ = ^77 E 9(X)X(C), (2-2) 



where \ = X~ l an d F* denotes the complex character group of F*. 

We first recall a few elementary properties of Gauss sums. For proofs of 
these properties, see [H Theorem 1.1.4]. The first is 



The second is 

and the third one is 



g{x)g(x) =q,tfx7 L xo- (2.3) 
g(x p )=g(x), (2.4) 



g(x' 1 ) = x(-i)g(x)- (2-5) 

While it is easy to determine the absolute value of nontrivial Gauss sums 
(see (|2.3p ). the explicit evaluation of Gauss sums is a difficult problem. 
However, there are a few cases where the Gauss sums g(x) can be explicitly 
evaluated. The simplest case is the so-called semi-primitive case, where 
there exists an integer j such that p> = — 1 (mod N) (here N is the order of 
X in F*). Some authors [311] also refer to this case as uniform cyclotomy, or 
pure Gauss sums. We refer the reader to [H p. 364] for the precise evaluation 
of Gauss sums in this case. 

The next interesting case is the index 2 case, where —1 is not in the sub- 
group (p), the cyclic group generated by p, and (p) has index 2 in (Z/NZ)* 
(again here N is the order of x i n F^). Many authors have studied this case, 
including Baumert and Mykkeltveit [2], McEliece [22], Langevin [2U], Mbodj 
[2T] . Meijer and Van der Vlugt [23], and Yang and Xia [30]. In the index 2 
case, it can be shown that N has at most two odd prime divisors. For the 
purpose of constructing difference sets by taking union of cyclotomic classes, 
we will need N to be even and (q — 1)/N to be odd (cf. [SJ p. 357]). Below 
is the result on evaluation of Gauss sums that we will need in Section 3. 

Theorem 2.1. ([301 Theorem 4.4, Case D]) Let N = 2pf, where p x > 3 is 
a prime, p± = 3 (mod 4) and m is a positive integer. Assume that p is a 
prime, gcd(p,N) = 1, [(Z/JVZ)* : (p)] = 2. Let f = <j>(N)/2, q = p f , and X 
be a character of order N of¥* Then 



g{x) 



■l)^™^^ 1 , if pi = 7 (mod 8), 

-l)^<^ 1 ^p I r- h ( b+c f™ ) 2 , ifpi = 3 (mod8), 

p-i 



where h is the class number ofQ(y/—pi), p* = (—1) 2 p, and b, c are integers 
satisfying the following conditions 

(i) b,c ^ (mod p), (ii) b 2 + p\c 2 = Ap h , (Hi) bp^~ = —2 (modpi). 
Moreover, when p = 3 (mod 4), we have 
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(1) forO<t<m- 1, 

pU _ J(-l) m V^ (/_1)/2 > if Pi = 7 (mod 8), 

9VC 1 )- | ( _ 1) m+l x/= ^ p (/-l)/2-V 1 (^Ea ) 2 P i ) if pi = 3 (mod 8); 

(2) g^P\)= p U-p\h)/2 { b±^K ) p\. 

(3) g( X P?) = (_l)(/-i)/y/-i)/2^. 

We will also need the Stickelberger congruence for Gauss sums, which we 
state below. Let p be a prime, q = p\ and let be a complex primitive 
(q — l)th root of unity. Fix any prime ideal ^3 in Z[^ g _i] lying over p. Then 
^[£<?-i]/^P i s a finite held of order q, which we identify with ¥ q . Let wqj be 
the Teichmiiller character on ¥ q , i.e., an isomorphism 

^iF^IU,.!,^,...,^} 

satisfying 

UAp(a) (mod <p) = a, (2.6) 
for all a in F* The Teichmiiller character ujy has order q — 1; hence it 
generates all multiplicative characters of F g . 

Let be the prime ideal of lying above For an integer a, 

let 

s(a) = j/p(#(w^ a )), 

where v-p is the "P-adic valuation. Thus P s ( a ) \ \ g(uj^ a ). The following eval- 
uation of s{a) is due to Stickelberger (see [H p. 344]). 

Theorem 2.2. Let p be a prime and q = p* . For an integer a not divisible 
by q — 1, let a® + a\p + a2P 2 + • • • + Of-ip* -1 , < ctj < p — 1, be the p-adic 
expansion of the reduction of a modulo q — 1 . Then 

s(a) = a + a± H + a/_i, 

t/iat is, s(a) is the sum of the p-adic digits of the reduction of a modulo q — 1. 
Furthermore, define 

t(a) = a !ai! • • • o/_i!, ir = £ p -l. 
Then with s(a) and oj<g as above we have the congruence 



//UV' ) = (modP s(a)+1 ). 



- a \ 



t(a) 

3. Cyclotomic Constructions of Difference Sets 

We first recall a well-known lemma in the theory of difference sets. 

Lemma 3.1. Let G be an abelian group of order v, D be a subset of G of 
size k, and let X be a positive integer. Then D is a (v, k, X) difference set in 
G if and only if 

x(D)xiD) = k - X 



6 



FENG AND XIANG 



for every nontrivial complex character x of G. Here, x(-D) stands for 
^2deDX(d)- Moreover suppose that D n D^ 1 ^ = and 1 D. Then D 
is a skew Hadamard difference set in G if and only if 

X(D) = ~ X± f^ (3-1) 
for every nontrivial complex character x of G. 

Paley type partial difference sets are counterparts of skew Hadamard dif- 
ference sets. We give the definition of these sets here. Let G be a finite 
(multiplicative) group of order v. A /c-element subset D of G is called a 
(v,k,X,fj,) partial difference set (PDS, in short) provided that the list of 
"differences" x,y G D, x ^ y, contains each nonidentity element of D 

exactly A times and each nonidentity element of G\D exactly /i times. Fur- 
thermore, assume that v = 1 (mod 4). A subset D of G, 1 D, is called a 
Paley type PDS if D is a (v, ^t~) PDS. The set of nonzero squares 

in F g , q = 1 (mod 4), is an example of Paley type PDS, which is usually 
called the Paley PDS in ¥ q . The strongly regular Cayley graph constructed 
from the Paley PDS is the Paley graph. 

All constructions in this section are done in the following specific index 2 
case: N = 2p 7 y 1 p\ > 3 is a prime, and p\ = 3 (mod 4); p is a prime such 
that gcd(p,N) = 1, -1 (p) C (Z/NZ)*, and [(Z/NZ)* : (p)] = 2 (that is, 
/ := ordjvfc) = ^(JV)/2)- 

3.1. The pi = 7 (mod 8) case. We first give a construction of skew 
Hadamard difference sets in the case where p\ = 7 (mod 8). Let p be a prime 
such that gcd(p,A0 = 1. Write / := ord N (p) = 4>{N)/2 (so N\(pf - 1)). 
Let E = F q s be an extension field of ¥ q , where q = pi . Let 7 be a fixed 
primitive element of E, let Co = (7^) and Cj = 7* Co for 1 < i < N — 1. 

Theorem 3.2. Assume that we are in the index 2 case as specified above, 
and E = ¥ q s with s odd. Let I be any subset of Z/NZ such that {i 
(mod p™) \ i e 1} = Z/p™Z, and let D = Uj 6 /C. Then D is a skew 
Hadamard difference set in (E,+) if p = 3 (mod 4) and D is a Paley type 
PDS ifp= 1 (mod 4). 

Proof. We shall only give the proof in the case where p = 3 (mod 4). The 
proof in the case where p = 1 (mod 4) is similar. First, we note that since 
p = 3 (mod 4) and s is odd, we have -1 £ C p m. By the choice of I, we 
have — D n D = 0. Secondly, observe that since p\ = 7 (mod 8), we have 
f-1 = El^lpf- 1 -! = (_l) m -l (mod 4). Therefore (-l)^" 1 )/ 2 = {-l) m . 
Thirdly, let r\ be any character of F* of order N. By Theorem 12.11 and 
the second observation, we have that for every < t < m, g ¥ (rfi) = 

9 Vq (r]- p{ ) = rfH-l)g Wq (rfi) = (-l)^" 1 )/ 2 ^. 
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Now by the index 2 assumption, any integer in the set {i | 1 < i < N — 
1, gcd(i, N) = 1} is congruent (modulo N) to an element in (p) or an element 
in —(p). Therefore all odd integers in the interval [l,iV — 1] are congruent 
to ±p r p\ modulo N. Using (12.4p and the third observation above, with r\ 
being any character of F* of order N, we have 

Fe (rt = (-l) m P (/ - 1)/2 v^ 

for all odd integers j, 1 < j < N — 1. 

Now let x be an arbitrary character of E* of order N. Since N\(q — 1), x 
is the lift of some character r/ of F* and o{rf) = N (see [H Theorem 11.4.4]). 
Following the notation of [I], we write \ = rf . It follows that \ 3 = (rf)' 
for all 1 < j < N — 1. Using the Davenport-Hasse theorem on lifted Gauss 
sums (IH p. 360]), we have that for all odd integers j, 1 < j ' < N — 1, 

^(X^') = {-l)'-\ q (r]- J Y = (-l) m /^(V=p) s - (3-2) 

We will prove the result stated in the theorem by using the second part of 
Lemma [3.11 To this end, let a be an arbitrary integer such that < a < N—l 
and let tp be the additive character of E defined as in (|2,ip . with ¥ q replaced 
by E. We compute 



iP{ 1 a D) = Y,Tp{l a C l ) 



N 

iGl x£E* 



T 

N a ' 



where 



Here Cq is the unique subgroup of order N of E* . Note that in the last 
step of the above calculations we have used (|2.2j> . 

We now proceed to computing the sum T a . If 9 E Cq" and o(0) = 1, then 
g E (0) = -1, and J2iei e (^ a+i ) = Pi - li 9 ^ C o> °i e ) + !> and °(°) is odd > 
then £ ie/ #( 7 a+i ) = YfSo 1 0(l a+i ) = 9 (l a ) 6J ^T = °- Therefore, with 
X a fixed generator of Qj 1 , we have 

j odd, 1<j'<JV-1 i£-T 
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Using A3. 21) and writing £jv for x(t)> a complex primitive Nth root of unity, 
we have 

T a = -pT + (-ir P ^- i)/2 (v^pr E Ex 1+2u ^ a+i ) 
= -^+(-i)> s(/ - 1)/2 (v^) s E^ +l ( E 4 a+,) 

For each a, < a < N — 1, there is a unique i a 6 J such that p^Ka + i a )- 
Write a -M a = p^ia f° r some integer j a . Then 

r a = -p? + (-i)> s(/ - i)/2 (x/=^ s (-i)^r- 

It follows that 

^rf D ) = 1 + 1 V P . 

By Lemma 13,11 D is a skew Hadamard difference set in (E,+). The proof 
is now complete. □ 

Example 3.3. Let p\ = 7, N = 14, p = 11. Then it is routine to check 
that ordTv(p) = 3 = 4>(N)/2. Let C{, < i < 13, be the cyclotomic classes 
of order 14 of F U 3. 

(1) Take I = {0, 1, ... , 6}. Then by Theorem [3J2 L> = C U d U • • • U 
Cg is a skew Hadamard difference set in (F n 3,+). Let Dev(D) denote 
the symmetric design developed from the difference set D. One can use a 
computer to find that Aut(Dev(.D)) has size 5 • ll 3 • 19. 

(2) Take I = {0, 1, 3, 4, 5, 6, 9}. Then by Theorem EH D' = C U d U 
C3 U C4 U C5 U 6*6 U Cg is also a skew Hadamard difference set in (F 11 3, +). 
One finds by using a computer that Aut(Dev(L>')) has size 3 • 5 • ll 3 • 19. 

The automorphism group of the Paley design has size 3 • 5 • 7 • ll 3 • 19. 
So the three difference sets D, D' and the Paley difference set in (F 11 3, +) 
are pairwise inequivalent. Also note that the sizes of the Sylow p-subgroups 
of Aut(Dev(.D)) and Aut(Dev(L>')) are q = ll 3 , while the size of the Sylow 
p-subgroups of the automorphism groups of the designs developed from the 
difference sets constructed by Muzychuk [24J is strictly greater than q, we 
conclude that both D and D' are inequivalent to the corresponding skew 
Hadamard difference sets in [24J. 

Remark 3.4. (1) The automorphism group of the Paley design is deter- 
mined in [16J. Our construction in Theorem 13.21 includes the Paley con- 
struction as a special case. It seems difficult to generalize the method in 
|16j to determine the automorphism groups of the designs developed from 
our difference sets. Based on some computational evidence, we conjecture 
that Aut(Dev(-D)), with D = Uj g /Cj as given in the statement of the theo- 
rem, is generated by the following three types of elements: (i) translations by 
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elements of ¥ q , (ii) multiplications by elements in Co, and (iii) oi, p l I = I, 
where o~ p is the Frobenius automorphism of the finite field ¥ pS f. 

(2) Let N = 2 • 7 m , where m > 2. One can use induction to prove that 
ordjv(ll) = 3-7 m_1 = 4>(N)/2. Therefore the conditions of Theorem l3,2l are 
satisfied. So the examples in Example 13.31 can be generalized into infinite 
families. 

3.2. The pi = 3 (mod 8) case. We will again do the constructions in the 
index 2 case as specified at the beginning of this section. In addition, we 
will assume that 

(1) Pl = 3 (mod 8), ( Pl ^ 3), 

(2) N = 2 Pl , 

(3) 1 + pi = Ap h , where h is the class number of Q(i/— pi), 

(4) p = 3 (mod 4). 

Let q = p* , f = ordjv(p) = </>(iV)/2. As in Section 2, let be a primitive 
complex (q — l)th root of unity, and be a prime ideal in Z[£ g _i] lying over 
p. Then Z[£ g _i]/^3 is a finite field of order q. We will use Z[£ 9 _i]/^3 as a 
model for ¥ q . That is, 

F, = {0, 51?}, (3.3) 

where (, q _i = (mod *p). Hence 7 := £ q _i is a primitive element of ¥ q . 
Let w<p be the Teichmiiller character of ¥ q . Then 

w<p(7) = Cg-1- 

Let x = w q3 ^ . Then % is a character of F* of order N = 2p\ (and x 

depends on the choice of ^3). To simplify notation, we write £n for xil) = 

9-1 

^-l and £ pi for x 2 (t) = • Next let n=(q- 1)/ Pl . By the result in 
[20] (see also @J p. 376]), we have 

(1) s(— n) = (p — l)6o, s(n) = (p — for some positive integers 60, &i, 
and 60 > ^1 = 2^ j 

(2) (?(x 2 ) = p^2~ ( fe+c ^~ Pl ) ; where 6, c are integers satisfying (i) b, c ^ 

(mod p), (ii) b 2 + p\c 2 = 4p h , (iii) bp^~ = —2 (mod pi). 

By the assumption that 1 +p\ = 4p fc , we must have b, c £ {1, —1}. The 
sign of b is determined by the congruence in (iii). The sign of c depends on 
the choice of ^p. We have the following: 

Lemma 3.5. With notation as above, be = —\f—p\ (mod *p). 

Proof. Let V be the unique prime ideal of Z[£ 9 _i, £ p ] lying above Apply- 
ing the Stickelberger congruence to g(x 2 ) = <7( w m)> we have 

2 f-h (b + Cj-pi) 7T s (-' n ) , , 

g(x 2 )=P~~ ^—^ = -77 — r mod V s{ n)+1 . 

2 t(— n) 
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Now using the fact that p = IlCl = 7rP_1 IlCl * = ~ 7tP ~ 1 ( mod pP )> 

we can further simplify the above congruence to 

(p-l)(6 -(/-/t)/2) 

& + c v / =^T = 2(-l) 1+ — — = (mod?), 

t{ n) 



where in the last step we have used the nontrivial fact that 60 > b\ = 2~ • 
Therefore be = —\/—p\ (mod V). Since V - Pi G Z[£ P1 ] C Z[£ g _i], we have 
be + y/=pi eVD Z[£,_i] = <p. That is, 6c = -yf=pi (mod The proof 
is complete. □ 



Since 1 + p\ = Ap h , we have (1 + y/— Pi)(l — y/—pi) G *P for any prime 
ideal <p of Z[£ 9 _i] lying above p. It follows that either 1 + y/—p~[ G or 
1 — \/~Pl G ^P- We can choose a prime ideal ^3 (and then fix this choice) 
such that 

1 + ^/=pT G <P- (3.4) 

The corresponding 6, c in the evaluation of g(x 2 ) wm then satisfy be = 1 by 
Lemma 13.51 These discussions were essentially done in [3T]. But there are 
a few minor problems in that paper. That is the reason why we gave the 
detailed account here. 

By the index 2 assumption, we see that {i (mod p\) \ i G (p)} is the set of 
nonzero squares of TLjp\L. Consequently, Y^ie(p) £pi = 1±V, ~ P1 . It follows 
that l + 2£ je(p> & = ±7=^1= Tl (mod «p). Hence l+2£ fe(p) 7 in = T l. 
Since Ei 6 (p> £ Pl + E ie < P > ^ = -1, we have 

(l + 2^ 7 -) + (l + 2^ 7 - m ) = 0. 

ie(p) ie(p> 

So we can make a suitable choice of £q_i (that is, if necessary replace the 
originally chosen by Cgl^ such that 1 + 2Y^iet P ) 7 m = —I- 

We now give the construction of difference sets by using unions of cyclo- 
tomic classes. Let ¥ q be given as in (|3.3|) with *p chosen in such a way that 
(|3.4p holds, and 7 = £_ j be the primitive element of F 9 chosen above such 

that 1 + 2 Ylie{p) 7 ^ = _1 ' Let ^ = 2pi and let °° = and ^ = 7*°° 

for i = 1, 2, . . . , N — 1, be the cyclotomic classes of ¥ q of order N. Choose 
I = (p) U 2(p) U {0}, and define 

L> := U ieI d. 

Note that |/| = pi, and since 2 is a quadratic nonresidue modulo p%, we 
have {i (mod pi) | i G /} = Z/piZ. 

Theorem 3.6. i/ie a&cwe definition, D is a skew Hadamard difference 

set in (W q , +). 
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Proof. Since — 1 G C pi and 2 is a quadratic nonresidue modulo p\, we have 
—D n D = 0. That is, Z> is skew. 

We now proceed to proving the result by using the second part of Lemma f3.ll 
To this end, let a be an arbitrary integer such that < a < N — 1 and let t/j 
be the additive character defined as in (I2.ip . Also let x = ^ 1 >' N ^ where 



*P is chosen such that (I3.4p holds. We have 
^ a D) = £>( 7 a Ci) 



•i 



T 

N a ' 



where 



N-l 

When j = 0, we have g(x°) = —1) and Yliei X ^^{^ a+% " > ) = Pi- If j ^ is 
even, then £ i6/ x(7" i(a+i) ) = x(7^' (a+i) ) = X^ ) 2 ^^ = 0. 

Now note that every odd integer in the interval [1,N — 1] is congruent 
(modulo N) to an element in (p), or an element in — (p), or px- Therefore, 
we have 

ie(p) ie/ ie-(p> iei 

+ 5(x Pl )E^ 1 (7 a+J )- 

Specializing Theorem 12.11 to the m = 1 case and noting that / — 1 = 
(mod 4) since p\ = 3 (mod 8), we have 

y (x)= P c/-i)^v=p( 6+ y^ ) a , ^ =p (/ - i)/2 ^, 

where 6, c are the same as in the evaluation of g(x 2 ) (c.f. |3Ql p. 2531]), and 
6c = 1 by our choice of *p. Also recall that by (|2.4j) . we have <?(x p ) = ff(x)- 
We compute 

T Q = -pi+^- 1 )/ 2 -^( b + C ^ 1 ) 2 £ E^'(7 a+4 ) 



+ p </-i)/2-V^(*^^) E £x% 
V / je -(p>ie7 

+ p (/-D/2^7i^X Pl (7 a+t ). 



ie/ 
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Since {i (mod p\) \ i € 1} = Z/piZ, for each a, < a < N — 1, there is a 
unique i a in I such that pi\(a + i a ). Write a + i a = pija- We have 

EE^(f +4 )+ E E^^+E^ 1 ^) 

ie(p> ieJ je-(p) *e/ iel 

pi-i 

j odd is/ «=0 

= (-ly'-pi. 

In order to prove that L> is a skew Hadamard difference set, we must show 
that 

T a = -Pi + P if - 1)/2 V=PPie a (3.5) 

for some e a = ±1. Noting that ( b -±^EKf = ^-^ Pl +2bcV^ = i- Pl +V^ 
and 

EE^ a+i )+ E E^'^ a+i ) + E^ 1 (7 a+i ) = (-i) > Pi, 

je{p) iei je-{p) i&i iei 



one simplifies (|3.5p to 

where X a = £ ie(p> £, e7 ^ (a_H) ~ Eje-(p> Eie/ £jv • Usin g the as- 
sumption that 1 +pi = 4p fe , one further simplifies the last equation to 

(1 - Pl )(-iy° + 2(-l) a - 2-^= = (l+pi)e a . (3.6) 

Below we will prove that (|3,6p always holds, thus proving that D is a skew 
Hadamard difference set. We recall some useful facts. 

(1) {i (mod pi)\ie (p)} is the set of nonzero squares of Z/piZ. 

(2) The odd integers Pl 2 " 1 and p\ — 2 are congruent to elements in (p) 
modulo p\ since both 2 and —1 are nonresidues modulo p%. 

(3) By our choice of we have J2ie{ P ) £pi = . 

(4) We have £, 6(p> # = £ j£(p> e^ 1 " 1 ^^ = £ l£(p> ^(-1)' = 
-l+y-pi _ l-y-pi pi— i 



, , since is a square in 7Ljp\L. 

Now set y a := £ ie < P ) £ J6/ G i(a+0 - Then X a = Y a - %. We have 

Ya = E ^ E 6? = ( E C 3 ')(E 

je(p> »e/ ie(p) ieJ 
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The last sum above, can be evaluated as follows: Yliei Zn* = 

E Je(p) # + £ ie2(p> & + l= + + 1 = 1" V^Fi- Therefore 

r. = (£€rt(i-V=w)- 

We consider the following six cases. 
Case 1. a = 0. In this case, i a = 0, j a = 0. We have Y^je{p) ^iV° J = 2i 2~^"' 
y a = £i 2 — '-(l — y/—pi), and X a = — (pi — l)\/—p\. Condition (j3.6|) is satisfied 
with e a = 1. 

Case 2. a G (p). In this case, i a = 2 • ^^-a £ 2(p). j a = a = 1 (mod 2). 
We have £ i6<p ) = E i6(p> & j = ^f^, ^ = • (1 - v^T) = 

^p- ~ v 7- Pi) an d -^o = — 2-y/— pi. Condition (|3.6|) is satisfied with e a = 1. 

Case 3. a G — (p). In this case, i a = —a € (p), j a = 0. We have 

V P~ a i — V ^ - 1 +v /= Pi" v - - 1 +v / ~pi" . Ci _ r~^7\ — P1+ 1 
2^ie(p> ?jv ~~ Z^je(p) sj y — 2 ' 20 ~~ 2 v 1 V Pi; — 2 > 

and X a = 0. Condition (|3.6p is satisfied with e a = —1. 



Case 4. a 6 2(p). In this case, write a = 2u for some it £ (p). We have 
i a = (pi - 2)u € (p), ja = u = 1 (mod 2), and Ej 6 (p) Cjv^ = Eje( P ) & = 
-i-v^w . It followg that y ^ = =± I yEa .(i_ v ^;) = _2l+i. Thus X a = 0. 
Condition f|3.6[) is satisfied with e a = 1. 



Case 5. a 6 — 2(p). In this case, i a = —a 6 2(p), j a = 0. We have 

V P~ a i — v /tJ — - 1 +v /= pi" v _ - 1 +v /= pT . (-[ r~p^\ — -i+pi 1 
2^je{ P )$N — 2^je{p)?pi— 2 > r " ~ 2 I 1 V MJ- 2 + 

y/—pi, and X a = 2i/— pi. Condition (|3.6|) is satisfied with e a = —1. 

Case 6. a = pi. In this case, i a = 0, j a = 1. We have Y^,je(p) = 

Y a = - V=p!), and X a = ( Pl - 1) V=pT- Condition ^ 

is satisfied with e a = —1. 

The proof is now complete. Q 

Remark 3.7. It would be interesting to extend the construction in Theo- 
rem [3T6] to the general case where N = 2p™, p\ = 3 (mod 8) and m > 2 
is arbitrary. If this can be done, then we will obtain infinite families of 
skew Hadamard difference sets in this way even though currently we only 
know finitely many pairs (pi,p) such that 1 +p\ = Ap h , where h is the class 
number of Q(y / — pi). 

Example 3.8. Let p = 3,iV = 22, pi = 11. It is routine to check that 
ord22(3) = 5 = 4>(N)/2. Let / = 5, q = 3 5 and n = The class number 

h of Q( v / -ll) is 1 (c.f. [9, p. 514]). Therefore the condition 1 +pi = ip h 
is indeed satisfied. Let F35 be the finite field as in (j3.3|) with *p chosen 
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in such a way that (I3.4p holds. Choose a primitive element 7 of F 3 s such 
that 7 such that 1 + 2^ e (p}7 i?1 = -1, and let d, < % < 21, be the 
cyclotomic classes with respect to this choice of 7. Define / := (3) U 2(3) U 
{0} = {0, 1, 2, 3, 5, 6, 8, 9, 10, 15, 18}. Then D = U ieI d is a skew Hadamard 
difference set in (F 3 s,+). Using a computer one finds that Aut(Dev(.D)) 
has size 3 5 • 5 • 11, while the automorphism group of the corresponding Paley 
design has size 3 5 • 5 • ll 2 . We conclude that Dev(D) is not isomorphic to 
the Paley design. 
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